8.6
High
CVE-2025-48507 The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow…
Description
The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the ability to turn on and off subsystems within the SOC.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kria™ SOM | Versions not published | |
| Zynq™ UltraScale+™ MPSoCs | Versions not published | |
| Zynq™ UltraScale+™ RFSoCs | Versions not published |